Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
File:                     MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json)
Hash identifier:          g+/ZaQ7Z8zTJxQtDmRDvRSjDFUPAQV+JQjzOaud+na4=
Subject key identifier:   BE:B8:0C:6D:C5:97:A2:2A:19:FB:7C:EF:80:F3:F7:8A:11:A2:7F:3B
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Certificate issuer:       /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial:       019F9391F54003B58AD9DF5A1EC987DEEA49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
Manifest number:          1A69
Signing time:             Fri 24 Jul 2026 10:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:43 +0000
Files and hashes:         1: EGceg2KC2veG2ubJ67lLnyLOjtI.roa (hash: wY6zYtQUbn46Y33mgpfT8vGawedlaPHOCiudGF0vIQ4=)
                          2: FGz2Azbf0AxE4zPSOoCg4bCQxHI.roa (hash: zLIxet4MNh+fLw8tWoHJ+9JWHfqaXota8sy9Ge4lA3s=)
                          3: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: 01o2aYyjPxBnOgG42m4HgSV7Rce5q2xxLDxxZoV4hBM=)
                          4: Mqf6CjvjiOytmfKew5wMIrFMct0.roa (hash: WNuu5876X1n/9Z35upFbegg0OHBkwV/0aP5LxFUgXqw=)
                          5: Nct5nqhjZ5MmurkxWJBHHWbRMa4.roa (hash: 33QaAZca2Ux5dbZ3qMUfSafv9njl74xnkMuofl09biU=)
                          6: XFzx0VxKKF-e5w2Lr2cCrOGeanM.roa (hash: UP6bd6FhB5DBxfN1nWdp5xVVm3xQKWBg64Qhp36elmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:f5:40:03:b5:8a:d9:df:5a:1e:c9:87:de:ea:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
        Validity
            Not Before: Jul 24 10:00:43 2026 GMT
            Not After : Jul 25 10:00:43 2026 GMT
        Subject: CN=beb80c6dc597a22a19fb7cef80f3f78a11a27f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:8a:47:38:ba:5b:1c:d4:95:3f:68:0a:41:
                    78:db:fe:9a:2d:58:ce:52:f1:5b:e8:d1:a2:69:2a:
                    e3:fb:29:31:6a:f4:73:ae:37:8a:1a:95:e9:08:cf:
                    6e:1a:de:fe:60:c4:fd:06:51:a1:11:3b:06:fa:83:
                    6a:43:8e:7b:bf:50:d8:00:02:aa:ca:23:f3:7f:5c:
                    46:c5:5a:bd:fc:e3:d2:a0:82:59:29:f8:0b:6b:21:
                    6e:28:f1:85:1a:f6:78:58:29:86:06:1f:83:fc:43:
                    68:69:46:22:7b:ea:11:aa:a5:52:45:8a:8c:6e:93:
                    a3:07:00:60:29:d5:7e:1d:64:b3:98:2e:f6:d5:0a:
                    7d:70:9a:93:9b:c0:8c:95:87:01:79:01:ce:5e:1c:
                    72:4c:15:6d:eb:27:b8:e9:16:76:b4:3b:7c:9f:14:
                    65:59:7c:b8:e7:2d:d3:b9:99:e9:3e:b8:32:c2:ac:
                    d1:e4:5e:9c:c3:36:1f:bc:10:73:ed:0d:76:1e:9e:
                    87:ff:a1:66:4e:84:13:a3:2b:ec:cc:dc:74:48:12:
                    c1:9a:6c:b1:eb:ed:a1:24:74:c8:b0:9a:ae:ba:08:
                    cf:0a:ee:68:c5:7e:db:9f:48:03:10:c8:8a:6c:ce:
                    a6:69:10:41:74:c2:a7:43:bd:39:33:fc:42:2b:da:
                    cc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B8:0C:6D:C5:97:A2:2A:19:FB:7C:EF:80:F3:F7:8A:11:A2:7F:3B
            X509v3 Authority Key Identifier:
                keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:76:73:e2:1f:6a:e1:56:f6:86:c7:df:1c:bf:68:70:8c:c2:
         ce:ef:c3:e2:5f:42:6b:7c:17:97:a6:0d:ed:e3:d3:99:fd:4e:
         9a:45:f3:d4:7f:6a:58:38:ff:13:ad:94:ec:30:d1:90:3b:05:
         5c:d0:4c:48:c6:c3:89:dd:ef:06:6b:ae:24:bb:bf:a4:ca:15:
         2c:76:61:20:bd:9e:47:3b:df:d1:7c:dc:cf:47:88:58:7d:13:
         f4:ed:db:f3:cf:a7:ed:06:0b:1b:73:61:22:5c:5f:88:bd:5d:
         42:58:8b:70:ce:77:36:1e:0e:22:e0:dd:46:4c:7c:36:f6:b6:
         43:e9:c8:b0:84:56:10:86:7d:e6:c9:7d:c2:02:44:c4:9c:d9:
         12:a4:a4:1b:31:40:72:54:80:e6:6f:3d:5a:c5:16:c1:63:a5:
         62:9b:e1:f5:76:ab:cc:0a:16:14:89:3e:26:48:4b:71:ee:82:
         72:76:e3:b9:d4:0a:46:93:2d:d8:50:ff:96:8c:77:96:0d:2b:
         75:a2:e5:ac:d2:63:ba:c8:71:a6:25:37:d0:f8:4d:7b:19:d8:
         5b:7a:a1:9d:a9:cd:05:b2:11:33:1f:f2:44:8e:46:9f:22:b0:
         65:0f:d2:46:ae:30:08:e9:8b:ed:a7:52:34:bb:aa:9a:be:aa:
         ae:2d:0e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:58:37 2026 by rpki-client